Hi,From what i know, if the browser can get /access a file, the user can get that file because the browser add the file in its cache and with some knowledge can be copied.So, any file that the browser accesses can reach in the user's computer.My opinion, better don't stress yourself with this thing and let it to be for free.

ttmt
—
2012-02-06T19:06:50Z —
#3

The tester will be used on a site selling my own fonts. Letting them be downloadable would be counterproductive.

brothercake
—
2012-02-09T19:58:20Z —
#4

Ajax can only access files within the public folder. But you could use it to call a public PHP script which grabs files from higher up the heirarchy, then offers them for download. That way the files themselves wouldn't be directly accessible, and users would have to go through your download script, which you then can authenticate as necessary. People could still hotlink the download script, but that's why you authenticate with session control or whatever.

Search for something like "PHP download script" for the basic code to do that.